October 2026 CVE archive
Records published in NIST NVD between Oct 1 and Oct 29, 2026 (UTC). Data imported from the NVD CVE API 2.0 and the CISA KEV catalog; each record shows its own source and verification time.
Total records
16,212
Critical
1,207
High
5,399
Medium
5,736
Low
600
Severity not reported
3,270
In CISA KEV
17
Most affected vendors (by CPE data where available): microsoft (1078), google (711), ibm (140), oracle (117), adobe (110), broadcom (61), apache (45), freerdp (42), linuxfoundation (41), dell (40)
| CVE | Severity | CVSS | KEV | Vendor / product | Published | Modified |
|---|---|---|---|---|---|---|
| CVE-2026-106412 Race condition in Core in Google Chrome on on Mac prior to 155.0.8059.39 allowed... |
high | 8.3 | — | Google / chrome | 2026-10-06 | 2026-10-07 |
| CVE-2026-106403 Incorrect authorization in Accessibility in Google Chrome prior to 155.0.8059.39... |
high | 8.1 | — | Google / chrome | 2026-10-06 | 2026-10-09 |
| CVE-2026-106393 Use after free in Storage in Google Chrome prior to 155.0.8059.39 allowed a remo... |
high | 8.3 | — | Google / chrome | 2026-10-06 | 2026-10-07 |
| CVE-2026-106383 Use after free in Media in Google Chrome prior to 155.0.8059.39 allowed a remote... |
high | 8.8 | — | Google / chrome | 2026-10-06 | 2026-10-07 |
| CVE-2026-106387 Missing authorization in Mobile in Google Chrome on on iOS prior to 155.0.8059.3... |
high | 8.8 | — | Google / chrome | 2026-10-06 | 2026-10-08 |
| CVE-2026-106371 Incorrect authorization in Transactions Platform in Google Chrome on on Android... |
high | 8.8 | — | Google / chrome | 2026-10-06 | 2026-10-07 |
| CVE-2026-106373 Use after free in Fonts in Google Chrome on on Windows prior to 155.0.8059.39 al... |
high | 8.8 | — | Google / chrome | 2026-10-06 | 2026-10-07 |
| CVE-2026-106374 Type confusion in V8 in Google Chrome prior to 155.0.8059.39 allowed a remote at... |
high | 8.8 | — | Google / chrome | 2026-10-06 | 2026-10-07 |
| CVE-2026-106377 Race condition in Fonts in Google Chrome prior to 155.0.8059.39 allowed a remote... |
high | 8.3 | — | Google / chrome | 2026-10-06 | 2026-10-07 |
| CVE-2026-106378 Privilege elevation in Sandbox in Google Chrome on on Mac prior to 155.0.8059.39... |
high | 8.3 | — | Google / chrome | 2026-10-06 | 2026-10-07 |
| CVE-2026-106363 Missing authorization in FullScreen in Google Chrome prior to 155.0.8059.39 allo... |
high | 8.3 | — | Google / chrome | 2026-10-06 | 2026-10-14 |
| CVE-2026-106367 Missing authorization in Mobile in Google Chrome on on Android prior to 155.0.80... |
high | 8.4 | — | Google / chrome | 2026-10-06 | 2026-10-14 |
| CVE-2026-106352 Incorrect authorization in WebProtect in Google Chrome prior to 155.0.8059.39 al... |
high | 8.8 | — | Google / chrome | 2026-10-06 | 2026-10-14 |
| CVE-2026-106357 Use after free in WebRTC in Google Chrome prior to 155.0.8059.39 allowed a remot... |
high | 8.8 | — | Google / chrome | 2026-10-06 | 2026-10-14 |
| CVE-2026-106346 Improper state validation in DevTools in Google Chrome prior to 155.0.8059.39 al... |
high | 8.8 | — | Google / chrome | 2026-10-06 | 2026-10-14 |
| CVE-2026-106347 Use after free in Track in Google Chrome prior to 155.0.8059.39 allowed a remote... |
high | 8.8 | — | Google / chrome | 2026-10-06 | 2026-10-14 |
| CVE-2026-106349 Use after free in V8 in Google Chrome prior to 155.0.8059.39 allowed a remote at... |
high | 8.8 | — | Google / chrome | 2026-10-06 | 2026-10-14 |
| CVE-2026-106350 Incorrect authorization in Browser in Google Chrome prior to 155.0.8059.39 allow... |
high | 8.8 | — | Google / chrome | 2026-10-06 | 2026-10-14 |
| CVE-2026-106341 Type confusion in V8 in Google Chrome prior to 155.0.8059.39 allowed a remote at... |
high | 8.8 | — | Google / chrome | 2026-10-06 | 2026-10-14 |
| CVE-2026-106342 Information leak in Autofill in Google Chrome prior to 155.0.8059.39 allowed a r... |
high | 8.8 | — | Google / chrome | 2026-10-06 | 2026-10-14 |
| CVE-2026-106334 Information leak in Payments in Google Chrome prior to 155.0.8059.39 allowed a r... |
high | 8.8 | — | Google / chrome | 2026-10-06 | 2026-10-09 |
| CVE-2026-106335 Use after free in Media in Google Chrome prior to 155.0.8059.39 allowed a remote... |
high | 8.8 | — | Google / chrome | 2026-10-06 | 2026-10-07 |
| CVE-2026-106318 Use after free in Media in Google Chrome prior to 155.0.8059.39 allowed a remote... |
high | 8.8 | — | Google / chrome | 2026-10-06 | 2026-10-07 |
| CVE-2026-106308 Incorrect reference resolution in Autofill in Google Chrome on on Android prior... |
high | 8.8 | — | Google / chrome | 2026-10-06 | 2026-10-07 |
| CVE-2026-106309 Incorrect authorization in Selection in Google Chrome on on iOS prior to 155.0.8... |
high | 8.8 | — | Google / chrome | 2026-10-06 | 2026-10-07 |
| CVE-2026-106314 Incorrect authorization in Bluetooth in Google Chrome prior to 155.0.8059.39 all... |
high | 8.8 | — | Google / chrome | 2026-10-06 | 2026-10-07 |
| CVE-2026-106315 Use after free in Modularization in Google Chrome prior to 155.0.8059.39 allowed... |
high | 8.8 | — | Google / chrome | 2026-10-06 | 2026-10-07 |
| CVE-2026-106301 Confused deputy in Contextual Tasks in Google Chrome prior to 155.0.8059.39 allo... |
high | 8.1 | — | Google / chrome | 2026-10-06 | 2026-10-08 |
| CVE-2026-106292 Buffer overflow in Fonts in Google Chrome prior to 155.0.8059.39 allowed a remot... |
high | 8.3 | — | Google / chrome | 2026-10-06 | 2026-10-07 |
| CVE-2026-106293 Type confusion in ANGLE in Google Chrome prior to 155.0.8059.39 allowed a remote... |
high | 8.3 | — | Google / chrome | 2026-10-06 | 2026-10-07 |
| CVE-2026-106283 Use after free in Streaming in Google Chrome prior to 155.0.8059.39 allowed a re... |
high | 8.8 | — | Google / chrome | 2026-10-06 | 2026-10-07 |
| CVE-2026-106291 Use after free in GarbageCollection in Google Chrome prior to 155.0.8059.39 allo... |
high | 8.8 | — | Google / chrome | 2026-10-06 | 2026-10-07 |
| CVE-2026-106274 Incorrect reference resolution in Browser in Google Chrome on on Mac prior to 15... |
high | 8.8 | — | Google / chrome | 2026-10-06 | 2026-10-08 |
| CVE-2026-106278 Use after free in Select in Google Chrome prior to 155.0.8059.39 allowed a remot... |
high | 8.8 | — | Google / chrome | 2026-10-06 | 2026-10-07 |
| CVE-2026-106279 Incorrect reference resolution in Passwords in Google Chrome on on iOS prior to... |
high | 7.4 | — | Google / chrome | 2026-10-06 | 2026-10-07 |
| CVE-2026-106268 Use after free in WebRTC in Google Chrome prior to 155.0.8059.39 allowed a remot... |
high | 8.8 | — | Google / chrome | 2026-10-06 | 2026-10-07 |
| CVE-2026-106269 Use after free in CSS in Google Chrome prior to 155.0.8059.39 allowed a remote a... |
high | 8.8 | — | Google / chrome | 2026-10-06 | 2026-10-07 |
| CVE-2026-106271 Missing authorization in Workers in Google Chrome prior to 155.0.8059.39 allowed... |
high | 8.1 | — | Google / chrome | 2026-10-06 | 2026-10-08 |
| CVE-2026-106252 Incorrect comparison in Fonts in Google Chrome prior to 155.0.8059.39 allowed a... |
high | 8.8 | — | Google / chrome | 2026-10-06 | 2026-10-07 |
| CVE-2026-106255 Race condition in V8 in Google Chrome prior to 155.0.8059.39 allowed a remote at... |
high | 8.8 | — | Google / chrome | 2026-10-06 | 2026-10-07 |
Sources: NIST NVD (CVE API 2.0) and the CISA KEV catalog. Severity is as stated by the source; missing values are shown as “not reported”, never estimated.